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(57) Abstract: In an electronic voting 
process, a voter (Vi) encrypts his vote (vi) 
according to the encryption scheme (E ? ) 
of a tallier mix-net (50) used to tally up the 
votes cast. The voter (Vi) obtains on his 
encrypted vote, (xi), from an admin server 
module (20), a digital signature according 
to a fair blind signature scheme (FBSS). 
The encrypted vote (xi) is encrypted a 
second time, together with the unblinded 
digital signature (yi) thereof by the admin 
server, using the encryption scheme (E M ) 
of a randomizing mix-net (40), to yield 
an output (ci), and the voter uses his own 
signature scheme (S[) to sign this, giving 
(CJi). The voter sends an ID code and 
data including (q, aO to a bulletin board 
server (30). Discrepancies in this vote data 
can be detected and their origin traced by 
prompting the randomizing mix-net servers 
(40) to provide proofs of correctness, and 
using the signature-tracing mechanism of 
FBSS. 
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